Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
HP Systems Insight Manager 5.3 with SP1 Installation and Configuration Guide for Microsoft Windows > Chapter 3 Installing HP SIM on the Central Management Server (CMS) for the first time

Custom install

» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Glossary

 » Index

NOTE: The Remote Support Software Manager (RSSWM) is a prerequisite for the HP Remote Support Pack (RSP). If you do install RSSWM you will be prompted to provide a location path for the download; the default path is C:\Program Files\HP. Additionally, after a custom installation of HP SIM and RSSWM, the configuration of RSSWM launches automatically. If you do not want RSP or RSSWM on your CMS you can opt OUT of the RSSWM installation by unmarking the check box.
  1. Click Next, the Software Selection window appears. This window displays the complete list of the available components with a checkbox next to each one. If the checkbox is selected and disabled, the component is deemed a mandatory component and cannot be cleared. The amount of required disk space is also listed for each component. Select the components you wish to install.

    custom component selection
  2. Click Next to verify that enough disk space exists for the selected components. If enough space exists, the Service Account Credentials window appears. The Domain and User name fields default to the installing account credentials and can only be edited if doing a fresh install. Enter the password for this account.

    service account credentials
    NOTE: This user account is used to run the HP Systems Insight Manager service.
  3. Click Next. The Summary window appears.

    summary
  4. Click Install to initiate the installation process. This process installs all the products listed in the Selected Components table. The Status window appears. As you install each component, it states In Progress next to the component's name. After the component installs, it states Installed Successfully.

  5. Install the HP System Management Homepage:

    1. The HP System Management Homepage Setup window appears. The InstallShield Wizard guides you through the install of HP System Management Homepage. Click Next. The Operating Systems Groups window appears.

      NOTE: If at any time during the install of HP System Management Homepage you click Cancel, the installation and setup of the HP System Management Homepage ends.
    2. Select Administrator, Operator, or User from the Operating Systems Group Name field.

    3. Enter the group name of an operating systems group in the Group Name field. Click Add. The group name is added. A maximum of five entries can be added for each group level. Click Next to continue.

      NOTE: To delete a group name, select the group name, and click Delete.
    4. From the User Access window, configure the HP System Management Homepage for the following access types:

      • Select Anonymous Access to enable anonymous access to unsecured pages.

      • Select Local Access-> Anonymous or Local Access-> Administrator to set up the HP System Management Homepage to automatically grant local IP addresses at the selected access level.

        CAUTION: Selecting Local Access with Administrator privileges provides any users with access to the local console full access without prompting them for a user name or password.
    5. Click Next. The Trust Mode window appears.

    6. Select the level of security you want to provide from one of the three trust modes:

      • Trust By Certificate

        1. Select Trust By Certificate, and click Next. The Trusted Certificates window appears. The Trusted Certificates window allows trusted certificate files to be added to the Trusted Certificate List.

        2. Click Add File to browse and select any certificates to be included in the Trusted Certificate List. The Select File window appears. If an invalid file name is entered in the file name field, an error message appears, indicating the file does not exist. Click OK to select another file, or click Open to add the file to the Trusted Certificate List. The Trusted Certificate List appears. Click Next.

          NOTE: If you click Next without adding any certificates to the list, and no certificates exist from a previous installation, a message appears, indicating that if you do not specify any trusted certificates, HP SIM cannot access the HP Insight Management Agent on this system. Click OK if you do not want HP SIM to access the Insight Management Agent on this system, or click Cancel to close the window and add the trusted certificates to the list.The Trust By Certificates option enables the HP System Management Homepage system and the HP SIM system to establish a trust relationship by means of certificates. This mode is the strongest method of security because it requires certificate data and verifies the digital signature before enabling access.

        or

        1. Click Import. The Import Server Certificate window appears.

        2. Enter the name or IP address of the server whose certificate you want to import.

        3. Click Get Cert. The certificate information appears.

        4. Verify the certificate information. If you want to add this certificate to the Trusted Certificate List, click Accept and the certificate is added to the Trusted Certificate List, or click Cancel if you do not want to add it to the Trusted Certificate List. The Trusted Certificate List appears. Click Next.

          NOTE: You can add an unlimited number of trusted certificates.To delete a certificate, select the certificate, and click Delete. The selected certificate is removed.
        5. From the IP Binding window, select the IP Binding checkbox if you would like to bind to IP addresses that match a specific subnet and mask. Click Next.

        6. From the IP Restricted Logins window, select the Enable IP Restricted Logins checkbox if you would like to include or exclude specific IP addresses or IP address ranges. Click Next, and the Summary Panel appears.

      • Trust By Name

        1. Select Trust By Name. Click Next. The Trusted Server window appears. Enter the names of the servers you want to trust.

          Although the Trust By Name mode is a slightly stronger method of security than the Trust All mode, it still leaves your system vulnerable to security attacks. The Trust By Name mode sets up the HP System Management Homepage to only accept certain requests from servers with the HP SIM names designated in the Trust By Name field. The Trust By Name option is easy to configure and can prevent non-malicious access. For example, you might want to use the Trust By Name option if you have a secure network, but your network has two groups of administrators in two separate divisions. The Trust By Name option would prevent one group from installing software to the wrong system. This option does not verify anything other than the HP SIM server name submitted.

          NOTE: The server name cannot contain the following characters:

          ~ ! ` @ # $ % ^ & * ( ) + = " : ' < > ? , | ;

        2. Click Add to add the name of a server you want to trust. Click Next.

          NOTE: If you click Next without adding any server names to the list, an error message appears, indicating that if you do not specify any trusted server names, HP SIM cannot access the Insight Management Agent on this system. Click OK to proceed without trusting any systems, or click Cancel to close the window and add server names to the list. In the SMH interface, if you do not enter an HP SIM name (host name) the Apply button will not be enabled, however during SMH installation the installation will continue after displaying the error message.To delete a certificate, select the certificate and click Delete. The selected certificate is removed.
        3. From the IP Binding window, select the IP Binding checkbox if you would like to bind to IP addresses that match a specific subnet and mask. Click Next.

        4. From the IP Restricted Logins window, select the Enable IP Restricted Logins checkbox if you would like to include or exclude specific IP addresses or IP address ranges. Click Next, and the Summary Panel appears.

      • Trust All

        1. Select Trust All. Click Next. The IP Binding window appears.

        2. Select the IP Binding checkbox if you would like to bind to IP addresses that match a specific subnet and mask. Click Next.

          NOTE: The Trust All option leaves your system vulnerable to security attacks and sets up the HP System Management Homepage to accept certain requests from any server. For example, you might want to use Trust All if you have a secure network, and everyone in the network is trusted.You can add up to five subnet IP address/netmask pairs.If you click IP Binding but do not specify the IP address/netmask, then you might not be able to connect to the HP System Management Homepage.

          The IP Restricted Logins window appears. The IP Restricted Logins window enables you to select specific IP addresses or IP address ranges to include or exclude from gaining login access. Although optional, the HP System Management Homepage can restrict login access based on the IP addresses of the machine attempting to gain access.

        3. Select Enable IP Restricted Logins, and click Next. The IP Addresses to Include window appears. This window enables you to specify the IP address or IP address ranges to grant login access permission. If there are IP addresses in the Inclusion list, then only those IP addresses are enabled for login privileges. If there are no IP addresses in the Inclusion list, then login privileges are permitted to all IP addresses that are not in the Exclusion list.

          NOTE: A single address and ranges of addresses can be accepted in the IP Restricted Logins window. Enter the single address in the first box.
        4. In the Include field, enter a beginning IP address to which you want to grant login access. In the To field, enter an ending IP address to which you want to grant login access. All IP addresses that fall between the beginning and ending IP addresses are granted login access. Click Add. The IP address or IP address range is added to the Exclusion list. If necessary, select an IP address or IP address range, and click Delete to remove it from the Exclusion list. Click Next.

          NOTE: If you entered an invalid IP address or IP address range, an error message appears indicating the IP address is invalid. Click OK. Enter a valid IP address or IP address range, and click Add again. The IP Addresses to Exclude window appears.

          In the Exclude field, enter a beginning IP address to which you want to deny login access.

        5. In theTo field, enter an ending IP address to which you want to deny login access. All IP addresses that fall between the beginning and ending IP addresses are denied login access.

        6. Click Add. The IP address or IP address range is added to the Inclusion list. If necessary, select an IP address or IP address range, and click Delete to remove it from the Inclusion list. Click Next.

          NOTE: If you entered an invalid IP address or IP address range, an error message appears, indicating the IP address is invalid. Click OK. Enter a valid IP address or IP address range, and click Add again.If you select Next without adding any IP addresses to the Include or Exclude lists, a warning message appears, stating, IP Restricted Login checkbox will be marked as disabled. Do you want to proceed without adding any IP Address restrictions? If you click OK, the IP Restricted Login option on the IP Restricted Login window is cleared.

      The Summary Panel appears. The Summary Panel lists the location where the HP System Management Homepage is installed, the amount of space the installation requires, and the summary of the options that you specified during the installation.

    7. Click Next. The installation process is started. Click Finish to exit the wizard.

      NOTE: If HP SIM is installed after HP System Management Homepage is installed, the HP System Management Homepage 2048-bit key pair is replaced with the HP SIM1024-bit key pair.
  6. Install OpenSSH:

    1. On the Welcome to the OpenSSH Services Setup Wizard, click Next. The Select Destination Location window appears. Setup installs OpenSSH into the following folder C:\Program Files\OpenSSH. To change the location, use the Browse button. Click Next. The OpenSSH Service Log On As User window appears.

    2. Enter your account password. The User name and Domain fields are populated. Although these fields are populated, you can change these values to specify any user you choose. However, the account credentials you do choose must have local administrator rights (be a member of the local "Administrators" group.) Click Next. The Ready to Install window appears.

      NOTE: The OpenSSH Service Log On As User window appears only if installing on a Windows XP or Windows 2003 system.
    3. Click Install to continue with the installation.

    4. After installing OpenSSH, if prompted, click No, I will restart the computer later.

    5. Click Finish.

      NOTE: The local security policy is modified to give you the following rights: log on as a service, create a token object, and replace a process level token. See the HP SIM Readme at http://h18013.www1.hp.com/products/servers/management/hpsim/infolibrary.html for more details.
  7. Install the WMI Mapper:

    1. On the Welcome to the Pegasus WMI Mapper Setup Wizard, click Next. The End-User License Agreement window appears.

    2. After reading the license agreement, click I accept the terms in the License Agreement. Click Next. The Choose Setup Type window appears.

    3. Select the setup type. (The basic requirement for HP SIM is Typical installation. If you select Typical, omit step d.)

    4. Select the default location C:\Program Files\The Open Group\WMI Mapper or change the destination location using Browse. Click OK. Click Next. The Ready to Install window appears.

    5. Click Install to continue with the installation.

    6. Click Finish.

      NOTE: For Windows XP SP2 or Windows 2003 SP1 or later, COM security is updated to allow remote access and activation by everyone and anonymous users. See the HP SIM Readme at http://h18013.www1.hp.com/products/servers/management/hpsim/infolibrary.html for more details.
  8. Install HP Systems Insight Manager:

    1. When the Welcome to the HP Systems Insight Manager Setup Wizard appears, click Next.

      setup
    2. Select or enter a different folder name using Browse. Click Next. The Ready to Install window appears.

      ready to install
    3. Click Install. The Install Progress window appears.

      install progress
    4. Click Finish when the installation is complete to close the HP Systems Insight Manager Installer window.

      install complete
    5. After the HP SIM installation is complete, the Remote Support Software Manager installation window appears. The configuration of the ISEE_CMS_SWMAGENT completes automatically. This process provides the files needed so that you can access the HP Remote Support Pack application and run the installation. The HP Remote Support Pack is not active until it is customized to your enterprise. See the HP Remote Support Pack Registration, Configuration and Usage Guide at http://docs.hp.com/en/netsys.html#Remote Support Pack for configuration instructions.

  9. Install the Remote Support Software Manager (RSSWM). Follow the on-screen instructions to complete the RSSWM installation. See Chapter 7 “Initializing the Remote Support Software Manager” for more information about installing RSSWM.

  10. Install the HP Version Control Repository Manager:

    1. When the HP Version Control Repository Manager Setup window appears, click Install. The HP Version Control Repository Manager Setup Repository Directory window appears.

    2. Select the directory from which HP Version Control Repository Manager will retrieve support pack information using the Browse button. This directory must be manually created later if it does not exist. Click OK. Click Next. The HP Version Control Repository Manager Automatic Update window appears.

    3. Select the Enable Automatic Update checkbox to enable automatic downloading of HP ProLiant Support Packs and components at a specified interval and time.

    4. Click Finish. Installation of HP Version Control Repository Manager proceeds and completes.

      NOTE: If the HP Version Control Agent is configured to use the HP Version Control Repository Manager, warning appears: "At least one HP Version Control Agent must be configured to use the HP Version Control Repository Manager." If none are configured, verify the HP Version Control Agent settings to ensure proper operation of the automatic update feature. Click OK.
    5. Click Close.

  11. The Status window appears again, after all components have been installed, they will have an installed status. Click Next.

  12. The Registration window appears. Register HP SIM or click Register Later.

    NOTE: If you do not have Internet access, click Register Later or navigate to http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=HPSIM-LIC to register.
  13. After registering or clicking Register Later, the Installation complete window appears.

  14. Click Finish to complete the installation. If any of the components indicated that a reboot is necessary, your system automatically reboots after you click Finish.

NOTE: When installing HP SIM, a CMS host name that exceeds 15 characters is truncated, and the truncated name must be used to complete the installation. After the install, two administrator accounts are created. One account includes the original host name\administrator and the other account includes the truncated host name\administrator. To log in, use the original host name in the Domain field on the Sign in page.
Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 2003-2009 Hewlett-Packard Development Company, L.P.